Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File:                     iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier:          C2W8NnHmlKUwZ52D37WPytheSi3RnRc1mgW3pSzPBUs=
Subject key identifier:   4D:B6:AF:B7:67:7D:C7:24:88:9F:DD:59:52:5E:F9:DC:4B:D1:4B:3C
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer:       /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial:       019EB7A16B3A9C8C11FB193BBF6E8A902331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number:          0156
Signing time:             Thu 11 Jun 2026 17:01:09 +0000
Manifest this update:     Thu 11 Jun 2026 17:01:09 +0000
Manifest next update:     Fri 12 Jun 2026 17:01:09 +0000
Files and hashes:         1: UTmSNHW_h1OEtIHiOMz9m7RdXcQ.asa (hash: 2JMO3R8vQ9ztrTHPM06LK7EXviAp0gW+oBxKpsmJcSY=)
                          2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: SYPTKD1bZqLBYmdGFiqp3JJIQvRZT6tuhPR3IG/2khk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:6b:3a:9c:8c:11:fb:19:3b:bf:6e:8a:90:23:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
        Validity
            Not Before: Jun 11 17:01:09 2026 GMT
            Not After : Jun 12 17:01:09 2026 GMT
        Subject: CN=4db6afb7677dc724889fdd59525ef9dc4bd14b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:cf:d6:d5:4e:b9:3b:7f:7e:b2:23:b9:0c:
                    5e:5e:d8:7e:ac:01:3a:eb:7a:14:05:d1:7d:6b:56:
                    15:7d:d8:8d:6d:4d:1b:ab:dd:3b:b6:bf:4e:52:f3:
                    fb:ea:19:69:04:ff:6d:34:d2:c7:57:4c:4b:11:4c:
                    ed:dc:1c:db:52:a6:13:9d:63:8d:8f:1d:4f:00:d7:
                    98:67:d4:60:6c:84:3f:a4:63:ba:38:f9:93:4c:36:
                    b1:5d:1c:af:38:74:a9:83:88:88:9f:c3:06:9e:d0:
                    e2:ee:d4:3e:87:e3:fa:05:7e:a4:6d:e2:1b:8e:00:
                    cf:68:83:e2:12:41:cd:74:eb:57:52:f3:ac:e5:38:
                    bd:41:ca:ac:23:5a:7a:99:36:bb:c6:41:b0:c9:9d:
                    2e:f3:39:91:a1:73:2b:8e:ca:a7:db:b4:3c:9f:08:
                    69:15:fd:b9:b6:c9:78:5b:ef:f5:5e:7e:76:7a:8b:
                    8f:e1:bf:57:83:aa:2a:d1:42:2f:8a:16:c8:7b:88:
                    71:1c:d9:e2:c4:aa:ff:97:4c:08:f3:e1:16:06:52:
                    7f:5a:57:24:0b:57:0f:89:b5:81:68:6b:3d:77:0b:
                    0d:b7:9d:87:d3:ab:05:5f:97:16:da:f3:61:77:25:
                    36:ab:37:82:82:f6:5d:0d:c4:35:61:85:40:c2:b4:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B6:AF:B7:67:7D:C7:24:88:9F:DD:59:52:5E:F9:DC:4B:D1:4B:3C
            X509v3 Authority Key Identifier:
                keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:fc:7e:ef:69:d5:14:d6:bc:fc:f4:dc:39:c3:90:59:60:37:
         46:3c:db:2a:af:f8:44:6d:da:17:8f:5f:a6:75:71:a5:2a:b9:
         58:f1:be:f8:47:8a:ad:64:94:37:c2:af:a3:70:2f:8b:0d:b5:
         a1:98:88:cd:08:0f:e5:ec:f8:6a:d5:d4:aa:bb:6b:f7:e3:3d:
         5b:65:08:a0:13:12:91:3e:9c:bb:ed:4b:e8:99:0d:10:56:5e:
         d7:1d:75:aa:d6:ba:b5:43:ca:c3:58:cd:19:5d:29:f3:01:78:
         b2:08:e6:7a:3d:90:da:ba:7b:5e:9f:69:37:65:78:97:7d:7f:
         58:7f:7b:62:b9:26:12:7b:c7:fa:29:90:14:8e:28:81:8b:e7:
         3b:f5:51:b8:95:41:5a:84:cd:da:fe:9f:1c:45:ae:62:91:f4:
         45:78:4d:12:87:4e:c1:13:b4:ef:9d:05:f3:a9:44:18:ea:61:
         9c:e9:02:78:3e:4c:80:af:06:8f:6e:89:d5:af:da:3c:24:8c:
         46:f2:ff:e6:2d:85:c9:3b:3d:d7:9e:6b:48:be:8a:ab:90:31:
         83:66:d3:08:c3:d3:d3:13:7b:1d:1f:22:64:9d:0c:f6:70:06:
         d3:ac:cb:41:a0:80:e6:db:3f:b5:e7:5c:48:a4:1b:72:81:6c:
         09:22:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:44:17 2026 by rpki-client